General
- Target DOC-QQBRWF.zip
- Size 593B
- Sample260804-kdx6mavgnb
- SHA256 c4a4ea1449249cd6a95da05e3e27bff408c08adf02a3fc98c9f5a60a8504e4ce
- MD5 a3e77bc07bb61c6a53424b809a0c39c1
- SHA1 86d83e1748bfe41b927eec43b0e9e02bf161e8ce
- SHA512 55fdf114a0536e40238ca43d70d8b3de423b9df1097afe75bf13e07371dd0722d976c64cc823cb3d23f53bd22207cda8a481dc20576ffc8aed1c576e024adbe6
- TLSH T181F0E1670231090ED41717BB057636B612C5E47395F277527266CE14B53A8A66D147C1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QQBRWF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QQBRWF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QQBRWF.lnk
- Size 1KB
- SHA256 bf5dad97c6e4a326215cab22c420347de4f61087073f76ef6fd4d1e6f24b155f
- MD5 676f3b5236348a05759833df2e8926a0
- SHA1 36c17a14e3d517ea026c5b0de0b5c6a5005fe765
- SHA512 994316bcb1768ea91ee121c85764466a6bb53bf0cd0bf546efe96d9cfff614874651894a44cce515606c2a24b7898afd03c184041bd786372fb7ecf3981514c7
- TLSH T13B317B503FED0624F3F39F7794BB572485BFB8A98E20CA2D0141464C5072A15E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.